Veracode blog (incl. migrated Phylum research posts)
npm code-profiler package / fake job social engineering campaign (in Q1 2024 Evolution of Software Supply Chain Security Report) · 2024-04-15T20:27:00+00:00
Our deeper analysis linked the malicious activities to specific GitHub repositories and user accounts, suggesting a potential connection to North Korean state-sponsored efforts targeting developers seeking employment .